Câu 475: CISA: Certified Information Systems Auditor

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

1. A. an information security framework. — đáp án hiện tại
2. B. past information security incidents.
3. C. a risk management process.
4. D. industry best practices.